CVE-2024-44937

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from a race condition in the ACPI notify handler, specifically in the intel-vbtn module, which can lead to a kernel NULL pointer dereference. This occurs when the handler attempts to register priv->switches dev twice, resulting in a duplicate filename error in sysfs and a subsequent kernel crash. The problem is triggered on Dell Venue 7140 tablets when undocking from the keyboard. To fix this, a mutex is used to protect the intel-vbtn notify handler from racing with itself.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.